[TOMEE-4110] Woodstox 6.4.0 (CVE-2022-40152)

• Type: Dependency upgrade
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 9.0.0.RC1, 8.0.13
• Fix Version/s: 8.0.14, 9.0.0
• Assignee: Jean-Louis Monteiro
• Reporter: Jean-Louis Monteiro
• Created: 14/Nov/22 11:01
• Updated: 06/Dec/22 10:18
• Resolved: 21/Nov/22 14:46

Description

Also known as GHSA-fv22-xp26-mm9w for Github https://github.com/advisories/GHSA-3f7h-mf4q-vrm4

Issue Links

• duplicates: TOMEE-4103 Update woodstox-core to mitigate CVE-2022-40153